CVE-2023-46384

概要

参考情報

• packetstormsecurity.com/files/175951/Loytec-LINX-Configurator-7.4.10-Insecure-Transit-Cleartext-Secrets.html · Third Party Advisory
• seclists.org/fulldisclosure/2023/Nov/6 · Mailing List
• cisa.gov/news-events/ics-advisories/icsa-24-247-01
• txone.com/blog/ten-unpatched-vulnerabilities-in-building-automation-products-identified-by-txone-networks
• seclists.org/fulldisclosure/2023/Nov/6

l-inx configurator のその他の脆弱性

• CVE-2023-46385高 7.5LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. An admin credential is passed as a value of …
• CVE-2023-46383高 7.5LOYTEC electronics GmbH LINX Configurator (all versions) uses HTTP Basic Authentication, which transmits usernames and passwords in base64-e…